Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: jfM/bQ3mnx9ayrzDgOssZWJOqttesXWOeGP40Y9ydFA=
Subject key identifier: 21:1E:25:6B:BC:24:7E:63:9B:C2:5C:6C:29:26:AB:2E:7B:63:F1:F2
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 019D38D2AE29CF08698C7105DD9EB37C5BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 02B4
Signing time: Sun 29 Mar 2026 09:00:24 +0000
Manifest this update: Sun 29 Mar 2026 09:00:24 +0000
Manifest next update: Mon 30 Mar 2026 09:00:24 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: a/L2j7ROs4n3q7Id0JoQbsE4hh6jg267GqduJXGaZZk=)
2: UcfLZ7L91GVWjLGWEYmlJV2c10o.roa (hash: uVZ/PpG6ROCuILZTxmMA8qXeD47uyabcF2INsekoGNc=)
3: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (hash: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ae:29:cf:08:69:8c:71:05:dd:9e:b3:7c:5b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Mar 29 09:00:24 2026 GMT
Not After : Mar 30 09:00:24 2026 GMT
Subject: CN=211e256bbc247e639bc25c6c2926ab2e7b63f1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:d4:d5:47:82:3f:6c:df:a4:dc:76:f4:1c:
2f:82:b4:25:d8:f5:06:f9:37:b0:4d:e6:03:fc:ea:
ea:a5:d0:e8:35:9c:dd:60:45:6b:0f:66:66:07:7e:
69:ac:cd:35:2f:79:54:7e:b3:13:6e:55:58:6c:18:
ef:4b:34:c6:42:dd:02:0b:a3:05:e2:14:27:5e:72:
30:e9:c0:de:b6:e4:01:56:5c:de:6b:27:86:c3:53:
12:f0:3c:b7:1d:92:37:8c:d7:c4:06:f0:cb:1c:0d:
c7:ad:69:b3:8b:44:9f:f6:22:60:c1:42:dc:4d:05:
65:c2:3e:ef:cc:47:71:a0:04:45:b0:15:18:83:06:
c6:43:07:c9:3f:25:8f:4c:da:ac:e2:11:0b:68:e4:
28:5b:17:51:fa:f5:ea:0d:ec:13:e1:a9:eb:f4:14:
84:5d:70:aa:7a:64:ac:d1:bd:5c:df:ad:d0:0b:4b:
05:c9:0d:40:12:af:27:48:6a:50:ee:9b:77:74:6b:
b2:01:96:59:7f:89:b3:d6:4d:ef:79:fa:7e:5c:14:
58:78:59:d4:ec:96:79:af:e5:73:75:58:90:30:3f:
b9:5b:53:ac:30:b7:0f:a8:9a:fc:c7:eb:ed:d0:05:
fa:61:7e:54:91:12:4e:48:b6:88:5b:67:ca:b4:f2:
e5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1E:25:6B:BC:24:7E:63:9B:C2:5C:6C:29:26:AB:2E:7B:63:F1:F2
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e7:db:17:a7:9a:c4:17:fc:5e:4b:d0:e4:04:62:24:30:30:
05:c2:f2:50:f6:cf:68:90:4c:ff:fa:dc:bf:15:ac:3a:cc:db:
46:1b:77:dc:5d:2a:d4:b5:dd:ff:24:ba:64:26:cf:a1:1f:5b:
1a:38:80:bb:99:22:67:7d:99:e5:f7:78:71:d6:2d:94:27:ee:
b8:f3:89:9d:b1:88:ed:0c:e8:95:63:b4:cf:e5:6c:d3:17:47:
09:89:54:0a:0a:74:26:2a:1c:ce:10:74:a1:d7:16:b1:59:f3:
a7:ba:8a:96:63:3b:a3:0a:49:97:66:68:6f:ce:7a:60:d2:c3:
01:75:a9:fe:ae:49:56:87:4d:f0:f0:0f:a8:35:c2:33:9c:92:
76:a7:24:55:b8:f0:1b:74:ba:a6:3c:aa:e2:4b:34:fb:8c:9e:
78:ce:9d:d8:80:55:48:a8:69:1c:7f:2b:c7:0d:a4:b4:71:04:
cf:2f:11:f6:e2:76:52:bb:c1:a0:e5:da:03:c4:4a:bc:c3:1d:
d0:b5:ce:69:aa:ab:54:49:d0:78:db:65:47:3e:77:5b:c0:37:
7a:6f:0d:94:15:4e:5b:d5:9d:a2:31:42:f3:18:8a:92:21:57:
41:dc:2f:f7:45:09:01:98:cb:0b:9b:c0:3a:fc:11:15:be:a1:
bf:a0:fc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:36 2026 by rpki-client